Overview

overview

10

Static

static

1

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    419f4b2b780057cb6244ed20ccf34817473c21becf8e21d2f3ade6d8c63d298b

  • Size

    4.2MB

  • Sample

    240810-w1m5qa1gjr

  • MD5

    3c02e253cd5d0bc84a853ffdf58a5c34

  • SHA1

    4d084c1090bab0b90da2c49dcacdd7731aaf69b2

  • SHA256

    419f4b2b780057cb6244ed20ccf34817473c21becf8e21d2f3ade6d8c63d298b

  • SHA512

    f2572eef44aeba80938f8634145e674883bd78e56a16ab68c95120a8627c290849e853247b2be4dd46ae02864b6137f529ad940530fb32ae27c2dcabc981827b

  • SSDEEP

    98304:YO54BDQcY+IuJ9ESlMidCVhvFutGhvIs6q32hTk7NzwLLZ/:YONcYmEpMGBX2ho7JwR/

Score
10/10
loaderbotxmrigdiscoveryloaderminerpersistence

Malware Config

Targets

    • Target

      419f4b2b780057cb6244ed20ccf34817473c21becf8e21d2f3ade6d8c63d298b

    • Size

      4.2MB

    • MD5

      3c02e253cd5d0bc84a853ffdf58a5c34

    • SHA1

      4d084c1090bab0b90da2c49dcacdd7731aaf69b2

    • SHA256

      419f4b2b780057cb6244ed20ccf34817473c21becf8e21d2f3ade6d8c63d298b

    • SHA512

      f2572eef44aeba80938f8634145e674883bd78e56a16ab68c95120a8627c290849e853247b2be4dd46ae02864b6137f529ad940530fb32ae27c2dcabc981827b

    • SSDEEP

      98304:YO54BDQcY+IuJ9ESlMidCVhvFutGhvIs6q32hTk7NzwLLZ/:YONcYmEpMGBX2ho7JwR/

    Score
    10/10
    loaderbotxmrigdiscoveryloaderminerpersistence

    • LoaderBot

      LoaderBot is a loader written in .NET downloading and executing miners.

      loaderminerloaderbot

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • LoaderBot executable

    • XMRig Miner payload

      miner

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks